Hmm, using syslog-ng as a proxy of sorts is what I've done in the past to make this work. Otherwise you could try the STunnel package: https://docs.netgate.com/pfsense/en/latest/packages/stunnel.html But using a VPN is probably more stable long term. Nothing custom required for that.